Why does NOD32 scan websites ??

Web browsers are at risk.

Where does it stop you ask? It doesn’t! Some web browsers like IE are affected by web applications that can load by merely visiting a website. When visiting a website with a non mainstream web browsers like Mozilla you may find that a script will not load and functionality is lost, even though the browser is compatible will all internet browsing standards. What is happening here? Well some companies load applications onto your machine without you knowing about it. These applications load themselves onto your local machine and typically report on topics of interest and habits that a user may have via http only when you are browsing making them very difficult to detect. Recommendation: set our browser security settings to high. By doing this you gain security and lose some functionality but privacy is worth more than functionality to some.

http://www.windowsecurity.com/articles/Spyware_Adware_Programs.html


Also, from the help file.

Enable HTTP checking – if enabled, all traffic through HTTP is scanned.

Ports used by the HTTP protocol – a list of ports used by the HTTP protocol.

Automatically detect HTTP communication on other ports, too - enables automatic detection of HTTP communication also on other than the ports specified.

In the Actions section you can specify how IMON will act if an incoming infiltration from the Internet is detected.

Display warning window with action selection - IMON will show up a warning window and allow the user to terminate the connection with the particular server

Automatically deny download of infected file - IMON will automatically terminate the connection

Compatibility setup provides an option to toggle between active and passive mode (better efficiency and better compatibility respectively) used for a particular application.

IMON works in two modes: „passive“ and „active“. In passive mode, portions of a downloaded file are continuously passed on to the target application whilst IMON stores a temporary copy of each of the fragments. When the last fragment is detected, the whole file is scanned for viruses. If an infiltration is detected, a warning window appears and the connection with the particular server is terminated. A disadvantage of that is that the already downloaded portion of the file may already contain a fundamental portion of a malicious code. What's more, if the application repeatedly attempts to download infected file, it may use the already downloaded data and request only the rest of the file. In such case, IMON may not find nothing suspicious in the remaining portion.

In active mode, IMON first downloads and scans whole file and then passes it on to the target application. This procedure is safer because in the case of an infiltration the application does not receive any portion of the downloaded file. A disadvantage is that the application receives all data at once, therefore it cannot show the download status properly. Therefore, if the download lasts for more than 5 seconds, a small window showing the dowload progress pops up beneath the system tray. Active mode is not suitable for certain types of data which requires a continual data flow (e.g. multimedia, streaming video/audio).


Switch to passive (compatible) mode for files larger than ... KB - if enabled, files larger than the specified size will be downloaded in passive mode automatically.

 

Gladd8tor

You're welcome.